{"id": "ZDI-16-493", "vendorId": null, "type": "zdi", "bulletinFamily": "info", "title": " Adobe Reader DC Font stream Parsing Out-Of-Bounds Read Information Disclosure Vulnerability", "description": "This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Font streams. A crafted Font stream can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.", "published": "2016-08-24T00:00:00", "modified": "2016-08-24T00:00:00", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "href": "https://www.zerodayinitiative.com/advisories/ZDI-16-493/", "reporter": "kdot", "references": ["https://helpx.adobe.com/security/products/acrobat/apsb16-26.html"], "cvelist": ["CVE-2016-4270"], "immutableFields": [], "lastseen": "2022-02-10T00:00:00", "viewCount": 6, "enchantments": {"dependencies": {"references": [{"type": "adobe", "idList": ["APSB16-26"]}, {"type": "cve", "idList": ["CVE-2016-4270"]}, {"type": "metasploit", "idList": ["MSF:ILITIES/ACROBAT-CVE-2016-4268/"]}, {"type": "nessus", "idList": ["ADOBE_ACROBAT_APSB16-26.NASL", "ADOBE_READER_APSB16-26.NASL", "MACOSX_ADOBE_ACROBAT_APSB16-26.NASL", "MACOSX_ADOBE_READER_APSB16-26.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310808581", "OPENVAS:1361412562310808582", "OPENVAS:1361412562310808583", "OPENVAS:1361412562310808584"]}]}, "score": {"value": 6.2, "vector": "NONE"}, "backreferences": {"references": [{"type": "cve", "idList": ["CVE-2016-4270"]}, {"type": "nessus", "idList": ["ADOBE_ACROBAT_APSB16-26.NASL", "ADOBE_READER_APSB16-26.NASL", "MACOSX_ADOBE_ACROBAT_APSB16-26.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310808582"]}]}, "exploitation": null, "vulnersScore": 6.2}, "_state": {"dependencies": 1647589307, "score": 0}}

{"cve": [{"lastseen": "2022-03-23T13:55:50", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, and CVE-2016-4270.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2016-08-26T19:59:00", "type": "cve", "title": "CVE-2016-4266", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270"], "modified": "2016-11-28T20:17:00", "cpe": ["cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat_dc:15.016.20045"], "id": "CVE-2016-4266", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4266", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*"]}, {"lastseen": "2022-03-23T13:55:52", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4269, and CVE-2016-4270.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2016-08-26T19:59:00", "type": "cve", "title": "CVE-2016-4268", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270"], "modified": "2016-11-28T20:17:00", "cpe": ["cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat_dc:15.016.20045"], "id": "CVE-2016-4268", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4268", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*"]}, {"lastseen": "2022-03-23T13:55:57", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, and CVE-2016-4270.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2016-08-26T19:59:00", "type": "cve", "title": "CVE-2016-4269", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270"], "modified": "2016-11-28T20:17:00", "cpe": ["cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat_dc:15.016.20045"], "id": "CVE-2016-4269", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4269", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*"]}, {"lastseen": "2022-03-23T13:55:54", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, and CVE-2016-4269.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2016-08-26T19:59:00", "type": "cve", "title": "CVE-2016-4270", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270"], "modified": "2016-11-28T20:17:00", "cpe": ["cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:acrobat_dc:15.016.20045"], "id": "CVE-2016-4270", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4270", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*"]}, {"lastseen": "2022-03-23T15:03:39", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, and CVE-2016-4270.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2016-09-17T02:59:00", "type": "cve", "title": "CVE-2016-6937", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "acInsufInfo": true, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270", "CVE-2016-6937"], "modified": "2017-07-30T01:29:00", "cpe": ["cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:acrobat_dc:15.016.20045"], "id": "CVE-2016-6937", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6937", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*"]}, {"lastseen": "2022-03-23T13:55:48", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, and CVE-2016-4270.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2016-08-26T19:59:00", "type": "cve", "title": "CVE-2016-4265", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270"], "modified": "2016-11-28T20:17:00", "cpe": ["cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:acrobat_dc:15.016.20045"], "id": "CVE-2016-4265", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4265", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*"]}, {"lastseen": "2022-03-23T13:55:52", "description": "Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4268, CVE-2016-4269, and CVE-2016-4270.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2016-08-26T19:59:00", "type": "cve", "title": "CVE-2016-4267", "cwe": ["CWE-119"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270"], "modified": "2016-11-28T20:17:00", "cpe": ["cpe:/a:adobe:acrobat:11.0.16", "cpe:/a:adobe:acrobat_reader_dc:15.006.30174", "cpe:/a:adobe:acrobat_reader_dc:15.016.20045", "cpe:/a:adobe:acrobat_dc:15.006.30174", "cpe:/a:adobe:reader:11.0.16", "cpe:/a:adobe:acrobat_dc:15.016.20045"], "id": "CVE-2016-4267", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4267", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:adobe:acrobat:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:reader:11.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.006.30174:*:*:*:classic:*:*:*", "cpe:2.3:a:adobe:acrobat_reader_dc:15.016.20045:*:*:*:continuous:*:*:*", "cpe:2.3:a:adobe:acrobat_dc:15.016.20045:*:*:*:continuous:*:*:*"]}], "metasploit": [{"lastseen": "2021-05-16T17:39:45", "description": "\n", "edition": 2, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "1976-01-01T00:00:00", "type": "metasploit", "title": "Adobe Acrobat: APSB16-26 (CVE-2016-4268): Security updates available for Adobe Acrobat and Reader", "bulletinFamily": "exploit", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270"], "modified": "1976-01-01T00:00:00", "id": "MSF:ILITIES/ACROBAT-CVE-2016-4268/", "href": "", "sourceData": "", "sourceHref": "", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "openvas": [{"lastseen": "2019-07-17T14:25:06", "description": "This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.", "cvss3": {}, "published": "2016-07-14T00:00:00", "type": "openvas", "title": "Adobe Reader Security Updates(apsb16-26)-Windows", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2019-07-05T00:00:00", "id": "OPENVAS:1361412562310808581", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808581", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Reader Security Updates(apsb16-26)-Windows\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat_reader\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808581\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6937\", \"CVE-2016-6938\");\n script_bugtraq_id(91716, 91712, 91714, 93016, 93014);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Reader Security Updates(apsb16-26)-Windows\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Reader version 11.x before 11.0.17 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Reader version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Reader/Win/Installed\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-17T14:25:39", "description": "This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.", "cvss3": {}, "published": "2016-07-14T00:00:00", "type": "openvas", "title": "Adobe Acrobat Security Updates(apsb16-26)-MAC OS X", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2019-07-05T00:00:00", "id": "OPENVAS:1361412562310808584", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808584", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Acrobat Security Updates(apsb16-26)-MAC OS X\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808584\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6938\", \"CVE-2016-6937\");\n script_bugtraq_id(91716, 91712, 91714, 93014, 93016);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Acrobat Security Updates(apsb16-26)-MAC OS X\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Acrobat version 11.x before 11.0.17 on MAC OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Acrobat version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Acrobat/MacOSX/Version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-17T14:25:55", "description": "This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.", "cvss3": {}, "published": "2016-07-14T00:00:00", "type": "openvas", "title": "Adobe Reader Security Updates(apsb16-26)-MAC OS X", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2019-07-05T00:00:00", "id": "OPENVAS:1361412562310808582", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808582", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Reader Security Updates(apsb16-26)-MAC OS X\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat_reader\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808582\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6937\", \"CVE-2016-6938\");\n script_bugtraq_id(91716, 91712, 91714, 93016, 93014);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Reader Security Updates(apsb16-26)-MAC OS X\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Reader\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Reader version 11.x before 11.0.17 on MAC OS X.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Reader version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"executable_version\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_macosx.nasl\");\n script_mandatory_keys(\"Adobe/Reader/MacOSX/Version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-17T14:25:41", "description": "This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.", "cvss3": {}, "published": "2016-07-14T00:00:00", "type": "openvas", "title": "Adobe Acrobat Security Updates(apsb16-26)-Windows", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4204", "CVE-2016-4200", "CVE-2016-4266", "CVE-2016-4214", "CVE-2016-4209", "CVE-2016-4193", "CVE-2016-4206", "CVE-2016-4251", "CVE-2016-4192", "CVE-2016-4194", "CVE-2016-4205", "CVE-2016-4267", "CVE-2016-4213", "CVE-2016-4250", "CVE-2016-6937", "CVE-2016-4210", "CVE-2016-4255", "CVE-2016-4269", "CVE-2016-4191", "CVE-2016-4202", "CVE-2016-4197", "CVE-2016-4211", "CVE-2016-4208", "CVE-2016-4265", "CVE-2016-4198", "CVE-2016-4201", "CVE-2016-4119", "CVE-2016-4215", "CVE-2016-4252", "CVE-2016-4196", "CVE-2016-4199", "CVE-2016-4203", "CVE-2016-4212", "CVE-2016-4207", "CVE-2016-4195", "CVE-2016-4268", "CVE-2016-4254", "CVE-2016-6938", "CVE-2016-4270"], "modified": "2019-07-05T00:00:00", "id": "OPENVAS:1361412562310808583", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310808583", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Adobe Acrobat Security Updates(apsb16-26)-Windows\n#\n# Authors:\n# Tushar Khelge <ktushar@secpod.com>\n#\n# Copyright:\n# Copyright (C) 2016 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/a:adobe:acrobat\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.808583\");\n script_version(\"2019-07-05T08:56:43+0000\");\n script_cve_id(\"CVE-2016-4191\", \"CVE-2016-4192\", \"CVE-2016-4193\", \"CVE-2016-4194\",\n \"CVE-2016-4195\", \"CVE-2016-4196\", \"CVE-2016-4197\", \"CVE-2016-4198\",\n \"CVE-2016-4199\", \"CVE-2016-4200\", \"CVE-2016-4201\", \"CVE-2016-4202\",\n \"CVE-2016-4203\", \"CVE-2016-4204\", \"CVE-2016-4205\", \"CVE-2016-4206\",\n \"CVE-2016-4207\", \"CVE-2016-4208\", \"CVE-2016-4209\", \"CVE-2016-4210\",\n \"CVE-2016-4211\", \"CVE-2016-4212\", \"CVE-2016-4213\", \"CVE-2016-4214\",\n \"CVE-2016-4215\", \"CVE-2016-4250\", \"CVE-2016-4251\", \"CVE-2016-4252\",\n \"CVE-2016-4254\", \"CVE-2016-4255\", \"CVE-2016-4265\", \"CVE-2016-4266\",\n \"CVE-2016-4267\", \"CVE-2016-4268\", \"CVE-2016-4269\", \"CVE-2016-4270\",\n \"CVE-2016-4119\", \"CVE-2016-6937\", \"CVE-2016-6938\");\n script_bugtraq_id(91716, 91712, 91714, 93016, 93014);\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2019-07-05 08:56:43 +0000 (Fri, 05 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-07-14 13:02:40 +0530 (Thu, 14 Jul 2016)\");\n script_name(\"Adobe Acrobat Security Updates(apsb16-26)-Windows\");\n\n script_tag(name:\"summary\", value:\"This host is installed with Adobe Acrobat\n and is prone to multiple vulnerabilities.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The multiple flaws exist due to,\n\n - An integer overflow vulnerability.\n\n - An use-after-free vulnerability.\n\n - A heap buffer overflow vulnerability.\n\n - A Memory corruption vulnerabilities.\");\n\n script_tag(name:\"impact\", value:\"Successful exploitation of this\n vulnerability will allow remote attacker lead to code execution and\n to bypass JavaScript API execution restrictions.\");\n\n script_tag(name:\"affected\", value:\"Adobe Acrobat version 11.x before 11.0.17 on Windows.\");\n\n script_tag(name:\"solution\", value:\"Upgrade to Adobe Acrobat version\n 11.0.17 or later.\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"qod_type\", value:\"registry\");\n\n script_xref(name:\"URL\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2016 Greenbone Networks GmbH\");\n script_family(\"General\");\n script_dependencies(\"secpod_adobe_prdts_detect_win.nasl\");\n script_mandatory_keys(\"Adobe/Acrobat/Win/Installed\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif(!readerVer = get_app_version(cpe:CPE)){\n exit(0);\n}\n\nif(!readerVer =~ \"^(11\\.)\"){\n exit(0);\n}\n\nif(version_in_range(version:readerVer, test_version:\"11.0\", test_version2:\"11.0.16\"))\n{\n report = report_fixed_ver(installed_version:readerVer, fixed_version:\"11.0.17\");\n security_message(data:report);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "nessus": [{"lastseen": "2022-05-18T16:09:47", "description": "The version of Adobe Reader installed on the remote Windows host is prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these to execute arbitrary code. (CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, CVE-2016-4270, CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an unauthenticated, remote attacker to bypass the JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.", "cvss3": {"score": 9.8, "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "type": "nessus", "title": "Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4209", "CVE-2016-4210", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4215", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4255", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270", "CVE-2016-6937", "CVE-2016-6938"], "modified": "2019-11-14T00:00:00", "cpe": ["cpe:/a:adobe:acrobat_reader"], "id": "ADOBE_READER_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92035", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92035);\n script_version(\"1.12\");\n script_cvs_date(\"Date: 2019/11/14\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)\");\n script_summary(english:\"Checks the version of Adobe Reader.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Reader installed on the remote Windows host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Reader installed on the remote Windows host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Reader version 11.0.17 / 15.006.30198 / 15.017.20050 \nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat_reader\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"adobe_reader_installed.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"installed_sw/Adobe Reader\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\n\napp_name = \"Adobe Reader\";\ninstall = get_single_install(app_name:app_name);\n\n# NOTE: For this version of Reader, the AcroRd32.dll file was only\n# updated to reflect the proper version. The normal EXE was\n# not updated, so we have to look at the DLL.\n# The detection plugin will not report the proper version.\nversion = install['DLL_Product_Version']; # DLL version - not EXE\npath = install['path'];\nverui = install['DLL_Display_Version'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n port = get_kb_item('SMB/transport');\n if(!port) port = 445;\n\n report = '\\n Note: The Adobe Reader version was extracted from AcroRd32.dll.' +\n '\\n Path : '+path+\n '\\n Installed version : '+verui+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:port, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, verui, path);\n", "cvss": {"score": 10, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-05-18T16:06:16", "description": "The version of Adobe Reader installed on the remote Mac OS X host is prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these to execute arbitrary code. (CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, CVE-2016-4270, CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an unauthenticated, remote attacker to bypass the JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.", "cvss3": {"score": 9.8, "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "type": "nessus", "title": "Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4209", "CVE-2016-4210", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4215", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4255", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270", "CVE-2016-6937", "CVE-2016-6938"], "modified": "2019-11-19T00:00:00", "cpe": ["cpe:/a:adobe:acrobat_reader"], "id": "MACOSX_ADOBE_READER_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92037", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92037);\n script_version(\"1.10\");\n script_cvs_date(\"Date: 2019/11/19\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Reader < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)\");\n script_summary(english:\"Checks the version of Adobe Reader.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Reader installed on the remote Mac OS X host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Reader installed on the remote Mac OS X host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Reader version 11.0.17 / 15.006.30198 / 15.017.20050 \nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat_reader\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"macosx_adobe_reader_installed.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/MacOSX/Version\", \"installed_sw/Adobe Reader\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"Host/local_checks_enabled\");\nos = get_kb_item(\"Host/MacOSX/Version\");\nif (empty_or_null(os)) audit(AUDIT_OS_NOT, \"Mac OS X\");\n\napp_name = \"Adobe Reader\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n report = '\\n Path : '+path+\n '\\n Installed version : '+version+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:0, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, version, path);\n", "cvss": {"score": 10, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-05-18T16:07:26", "description": "The version of Adobe Acrobat installed on the remote Mac OS X host is prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these to execute arbitrary code. (CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, CVE-2016-4270, CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an unauthenticated, remote attacker to bypass the JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.", "cvss3": {"score": 9.8, "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "type": "nessus", "title": "Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4209", "CVE-2016-4210", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4215", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4255", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270", "CVE-2016-6937", "CVE-2016-6938"], "modified": "2019-11-19T00:00:00", "cpe": ["cpe:/a:adobe:acrobat"], "id": "MACOSX_ADOBE_ACROBAT_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92036", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92036);\n script_version(\"1.10\");\n script_cvs_date(\"Date: 2019/11/19\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)\");\n script_summary(english:\"Checks the version of Adobe Acrobat.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Acrobat installed on the remote Mac OS X host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Acrobat installed on the remote Mac OS X host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Acrobat version 11.0.17 / 15.006.30198 / 15.017.20050\nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"MacOS X Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"macosx_adobe_acrobat_installed.nbin\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/MacOSX/Version\", \"installed_sw/Adobe Acrobat\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"Host/local_checks_enabled\");\nos = get_kb_item(\"Host/MacOSX/Version\");\nif (empty_or_null(os)) audit(AUDIT_OS_NOT, \"Mac OS X\");\n\napp_name = \"Adobe Acrobat\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n report = '\\n Path : '+path+\n '\\n Installed version : '+version+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:0, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, version, path);\n", "cvss": {"score": 10, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-05-18T15:42:36", "description": "The version of Adobe Acrobat installed on the remote Windows host is prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these to execute arbitrary code. (CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, CVE-2016-4270, CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an unauthenticated, remote attacker to bypass the JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows an unauthenticated, remote attacker to execute arbitrary code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.", "cvss3": {"score": 9.8, "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2016-07-13T00:00:00", "type": "nessus", "title": "Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4209", "CVE-2016-4210", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4215", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4255", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270", "CVE-2016-6937", "CVE-2016-6938"], "modified": "2019-11-14T00:00:00", "cpe": ["cpe:/a:adobe:acrobat"], "id": "ADOBE_ACROBAT_APSB16-26.NASL", "href": "https://www.tenable.com/plugins/nessus/92034", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(92034);\n script_version(\"1.12\");\n script_cvs_date(\"Date: 2019/11/14\");\n\n script_cve_id(\n \"CVE-2016-4191\",\n \"CVE-2016-4192\",\n \"CVE-2016-4193\",\n \"CVE-2016-4194\",\n \"CVE-2016-4195\",\n \"CVE-2016-4196\",\n \"CVE-2016-4197\",\n \"CVE-2016-4198\",\n \"CVE-2016-4199\",\n \"CVE-2016-4200\",\n \"CVE-2016-4201\",\n \"CVE-2016-4202\",\n \"CVE-2016-4203\",\n \"CVE-2016-4204\",\n \"CVE-2016-4205\",\n \"CVE-2016-4206\",\n \"CVE-2016-4207\",\n \"CVE-2016-4208\",\n \"CVE-2016-4209\",\n \"CVE-2016-4210\",\n \"CVE-2016-4211\",\n \"CVE-2016-4212\",\n \"CVE-2016-4213\",\n \"CVE-2016-4214\",\n \"CVE-2016-4215\",\n \"CVE-2016-4250\",\n \"CVE-2016-4251\",\n \"CVE-2016-4252\",\n \"CVE-2016-4254\",\n \"CVE-2016-4255\",\n \"CVE-2016-4265\",\n \"CVE-2016-4266\",\n \"CVE-2016-4267\",\n \"CVE-2016-4268\",\n \"CVE-2016-4269\",\n \"CVE-2016-4270\",\n \"CVE-2016-6937\",\n \"CVE-2016-6938\"\n );\n script_bugtraq_id(\n 91710,\n 91711,\n 91712,\n 91714,\n 91716,\n 92635,\n 92636,\n 92637,\n 92640,\n 92641,\n 92643,\n 93014,\n 93016\n );\n\n script_name(english:\"Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)\");\n script_summary(english:\"Checks the version of Adobe Acrobat.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The version of Adobe Acrobat installed on the remote Windows host is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of Adobe Acrobat installed on the remote Windows host is\nprior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore,\naffected by multiple vulnerabilities :\n\n - Multiple unspecified memory corruption issues exist due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit these to\n execute arbitrary code. (CVE-2016-4191, CVE-2016-4192,\n CVE-2016-4193, CVE-2016-4194, CVE-2016-4195,\n CVE-2016-4196, CVE-2016-4197, CVE-2016-4198,\n CVE-2016-4199, CVE-2016-4200, CVE-2016-4201,\n CVE-2016-4202, CVE-2016-4203, CVE-2016-4204,\n CVE-2016-4205, CVE-2016-4206, CVE-2016-4207,\n CVE-2016-4208, CVE-2016-4211, CVE-2016-4212,\n CVE-2016-4213, CVE-2016-4214, CVE-2016-4250,\n CVE-2016-4251, CVE-2016-4252, CVE-2016-4254,\n CVE-2016-4265, CVE-2016-4266, CVE-2016-4267,\n CVE-2016-4268, CVE-2016-4269, CVE-2016-4270,\n CVE-2016-6937)\n\n - An unspecified heap buffer overflow condition exists due\n to improper validation of user-supplied input. An\n unauthenticated, remote attacker can exploit this to\n execute arbitrary code. (CVE-2016-4209)\n\n - An unspecified integer overflow condition exists that\n allows an unauthenticated, remote attacker to execute\n arbitrary code. (CVE-2016-4210)\n\n - An unspecified flaw exists that allows an\n unauthenticated, remote attacker to bypass the\n JavaScript API and execute arbitrary code.\n CVE-2016-4215)\n\n - An unspecified use-after-free error exists that allows\n an unauthenticated, remote attacker to execute arbitrary\n code. (CVE-2016-4255, CVE-2016-6938)\n\nNote that Nessus has not tested for these issues but has instead\nrelied only on the application's self-reported version number.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://helpx.adobe.com/security/products/acrobat/apsb16-26.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Adobe Acrobat version 11.0.17 / 15.006.30198 / 15.017.20050\nor later.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-6938\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2016/07/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2016/07/13\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:adobe:acrobat\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"adobe_acrobat_installed.nasl\");\n script_require_keys(\"SMB/Registry/Enumerated\", \"installed_sw/Adobe Acrobat\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"install_func.inc\");\n\nget_kb_item_or_exit(\"SMB/Registry/Enumerated\");\n\napp_name = \"Adobe Acrobat\";\ninstall = get_single_install(app_name:app_name);\n\nversion = install['version'];\npath = install['path'];\nverui = install['display_version'];\n\nver = split(version, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(ver); i++)\n ver[i] = int(ver[i]);\n\n# Affected is :\n#\n# 11.x < 11.0.17\n# DC Classic < 15.006.30198\n# DC Continuous < 15.017.20050\nif (\n (ver[0] == 11 && ver[1] == 0 && ver[2] <= 16) ||\n (ver[0] == 15 && ver[1] == 6 && ver[2] <= 30174) ||\n (ver[0] == 15 && ver[1] >= 7 && ver[1] <= 16) ||\n (ver[0] == 15 && ver[1] == 17 && ver[2] <= 20045)\n)\n{\n port = get_kb_item('SMB/transport');\n if(!port) port = 445;\n\n report = '\\n Path : '+path+\n '\\n Installed version : '+verui+\n '\\n Fixed version : 11.0.17 / 15.006.30198 / 15.017.20050' +\n '\\n';\n security_report_v4(port:port, extra:report, severity:SECURITY_HOLE);\n}\nelse audit(AUDIT_INST_PATH_NOT_VULN, app_name, verui, path);\n", "cvss": {"score": 10, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "adobe": [{"lastseen": "2021-09-30T17:39:51", "description": "Adobe has released security updates for Adobe Acrobat and Reader for Windows and Macintosh. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. \n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2016-07-07T00:00:00", "type": "adobe", "title": "APSB16-26 Security updates available for Adobe Acrobat and Reader", "bulletinFamily": "software", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2016-4189", "CVE-2016-4190", "CVE-2016-4191", "CVE-2016-4192", "CVE-2016-4193", "CVE-2016-4194", "CVE-2016-4195", "CVE-2016-4196", "CVE-2016-4197", "CVE-2016-4198", "CVE-2016-4199", "CVE-2016-4200", "CVE-2016-4201", "CVE-2016-4202", "CVE-2016-4203", "CVE-2016-4204", "CVE-2016-4205", "CVE-2016-4206", "CVE-2016-4207", "CVE-2016-4208", "CVE-2016-4209", "CVE-2016-4210", "CVE-2016-4211", "CVE-2016-4212", "CVE-2016-4213", "CVE-2016-4214", "CVE-2016-4215", "CVE-2016-4250", "CVE-2016-4251", "CVE-2016-4252", "CVE-2016-4254", "CVE-2016-4255", "CVE-2016-4265", "CVE-2016-4266", "CVE-2016-4267", "CVE-2016-4268", "CVE-2016-4269", "CVE-2016-4270", "CVE-2016-6937", "CVE-2016-6938"], "modified": "2016-07-12T00:00:00", "id": "APSB16-26", "href": "https://helpx.adobe.com/security/products/acrobat/apsb16-26.html", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}]}